$ rpki-client -vvf rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft File: h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft (raw, json) Hash identifier: gr2YfdVKnSW+AG2P2spcAFd7OGn2aQD1Ow2tbY/1APg= Subject key identifier: 94:F3:FC:B2:91:8A:8C:81:66:C0:BE:0D:5B:54:FF:E6:12:C7:6E:A9 Authority key identifier: 87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04 Certificate issuer: /CN=A912A294/serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04 Certificate serial: 017A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft Manifest number: 0165 Signing time: Sat 31 May 2025 03:55:48 +0000 Manifest this update: Sat 31 May 2025 03:55:48 +0000 Manifest next update: Sat 07 Jun 2025 03:55:48 +0000 Files and hashes: 1: h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl (hash: 68PgP0ZJjfOyf+wIpXEJgg6w+EgKEq5elWhNB6GhGmU=) 2: 60C72042052911F0A2361C50C4F9AE02.roa (hash: eoqR2rI7tCJcx2sHbbxw1cinGXO6kmie9biadQvkvGU=) 3: 64B5B49A052C11F0AFEC0478C4F9AE02.roa (hash: osIylBmoiOl0hS+6q4jLTN9ELMVNH7Z3hIxqCI6TGCM=) 4: 24661146FA7311EFB58C366CC4F9AE02.roa (hash: vJ/paOcsiCM0y/LcDeCNMcXQ0i9PBxkDy6/mQy96vcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 378 (0x17a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A294, serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04 Validity Not Before: May 31 03:55:48 2025 GMT Not After : Jun 7 03:55:48 2025 GMT Subject: CN=683a7dc4-9f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:93:ca:ba:6c:94:b9:18:4f:79:13:71:fe:10: 9e:4c:e0:1a:3f:53:b8:1d:3a:a3:65:11:65:e6:45: 1b:1c:9d:6e:8b:76:d8:82:af:a9:7a:26:16:a5:9b: 8c:7c:06:38:3a:bd:f7:33:b2:06:24:5c:ee:dc:00: 58:ee:a1:53:fb:0a:a1:01:b6:b8:7e:73:f8:3b:c5: c3:53:6b:b3:69:18:85:64:a9:1f:d8:c7:2c:35:e2: 53:b1:ed:1a:3d:81:d7:67:be:37:25:3b:11:24:15: 9b:be:95:e0:09:cd:c7:4c:23:53:cf:22:56:7b:76: ae:53:70:7d:39:d6:8b:3a:70:38:ad:bd:f5:31:7b: e0:1c:d2:a3:ce:f6:2e:a6:ce:f1:56:07:ec:e3:ab: e8:ed:27:03:c0:9f:d7:c0:43:65:18:39:39:07:eb: ee:fa:1c:48:cf:f6:b4:8f:d6:f6:39:bc:ab:18:28: b2:f0:30:ce:a1:0a:0b:e9:fe:00:a6:4c:64:cd:17: c9:b8:3a:55:d5:c0:d5:15:28:ba:96:a7:36:5c:8e: 24:e4:af:aa:23:30:68:ee:69:5e:6a:35:65:cf:fa: 20:09:15:b2:b0:33:81:7f:b8:d0:bf:82:9b:ca:76: 52:e5:3a:2f:55:a3:1f:81:a9:3b:29:51:2c:0c:2e: 93:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F3:FC:B2:91:8A:8C:81:66:C0:BE:0D:5B:54:FF:E6:12:C7:6E:A9 X509v3 Authority Key Identifier: keyid:87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:e7:d0:a0:5e:30:da:a1:f1:55:1c:22:f3:20:be:88:54:bb: 72:28:a1:da:3e:90:0d:a8:51:a9:57:4c:f1:b1:01:ce:90:4a: f2:c5:1a:e5:22:b8:0a:d1:3b:53:a0:ae:d4:bb:77:df:14:08: da:72:40:5f:88:17:a2:ac:a8:f6:e9:b4:46:ee:7b:f1:37:e1: 3c:9f:85:63:df:c6:1c:a6:18:77:f0:68:a0:c0:3f:57:4d:94: 20:64:e0:e4:2a:bd:5b:b4:ab:2d:81:c5:93:d9:c3:d3:03:dc: 97:7a:d5:b5:1d:3e:af:70:d4:50:10:3b:22:f9:16:1f:83:1e: 9c:4f:b8:9b:c4:13:2b:fb:01:96:0c:fc:61:c7:5c:73:62:11: 76:c2:1e:e4:ce:87:93:92:d3:cd:c6:21:08:d5:6c:02:d0:88: b4:07:2e:3e:00:23:e9:1f:80:f5:98:90:df:bc:97:59:b0:cc: 52:18:ca:d3:d4:ae:01:a6:d2:0b:e6:5f:ef:88:4f:93:d1:c2: 77:1b:af:96:c3:25:ed:cc:d8:9d:9c:a1:8d:99:ef:10:44:fb: e3:9a:87:9e:11:89:ff:c2:0e:01:fc:78:3c:a2:99:1a:56:01: 2c:8e:77:66:28:e2:ae:b1:b6:e0:1a:a2:89:a5:dc:63:f4:35: 4c:9e:1a:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEyOTQxMTAvBgNVBAUTKDg3QjVEODUzRjY0MjUyMTVBREE3ODIyRjAyQTU3NDgz RUUyNjdDMDQwHhcNMjUwNTMxMDM1NTQ4WhcNMjUwNjA3MDM1NTQ4WjAYMRYwFAYD VQQDEw02ODNhN2RjNC05ZjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoJPKumyUuRhPeRNx/hCeTOAaP1O4HTqjZRFl5kUbHJ1ui3bYgq+peiYWpZuM fAY4Or33M7IGJFzu3ABY7qFT+wqhAba4fnP4O8XDU2uzaRiFZKkf2McsNeJTse0a PYHXZ743JTsRJBWbvpXgCc3HTCNTzyJWe3auU3B9OdaLOnA4rb31MXvgHNKjzvYu ps7xVgfs46vo7ScDwJ/XwENlGDk5B+vu+hxIz/a0j9b2ObyrGCiy8DDOoQoL6f4A pkxkzRfJuDpV1cDVFSi6lqc2XI4k5K+qIzBo7mleajVlz/ogCRWysDOBf7jQv4Kb ynZS5TovVaMfgak7KVEsDC6TiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJTz/LKR ioyBZsC+DVtU/+YSx26pMB8GA1UdIwQYMBaAFIe12FP2QlIVraeCLwKldIPuJnwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTI5NC85OTJGMUQwRTRB RDYxMUVFOTdCNTNGNzJDNEY5QUUwMi9oN1hZVV9aQ1VoV3RwNEl2QXFWMGctNG1m QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3WFlVX1pDVWhXdHA0SXZBcVYwZy00bWZBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTI5NC85OTJGMUQwRTRBRDYxMUVFOTdCNTNGNzJDNEY5QUUwMi9oN1hZVV9aQ1Vo V3RwNEl2QXFWMGctNG1mQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW59CgXjDaofFVHCLzIL6IVLtyKKHaPpANqFGpV0zxsQHOkEryxRrl IrgK0TtToK7Uu3ffFAjackBfiBeirKj26bRG7nvxN+E8n4Vj38Ycphh38GigwD9X TZQgZODkKr1btKstgcWT2cPTA9yXetW1HT6vcNRQEDsi+RYfgx6cT7ibxBMr+wGW DPxhx1xzYhF2wh7kzoeTktPNxiEI1WwC0Ii0By4+ACPpH4D1mJDfvJdZsMxSGMrT 1K4BptIL5l/viE+T0cJ3G6+WwyXtzNidnKGNme8QRPvjmoeeEYn/wg4B/Hg8opka VgEsjndmKOKusbbgGqKJpdxj9DVMnhoe -----END CERTIFICATE-----Generated at Sat May 31 17:46:27 2025 by rpki-client